Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
File:                     Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json)
Hash identifier:          NLobGTruefG72HJRuGbm3HJCISvL/3CMOAWr4vzyPJE=
Subject key identifier:   EB:B0:C8:4E:F9:47:02:E8:01:B9:A6:04:DA:69:83:D3:2D:62:2A:FA
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Certificate issuer:       /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial:       01A0BE79322114CE3B4DF32A15E8EA902FE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
Manifest number:          0488
Signing time:             Sun 20 Sep 2026 11:00:08 +0000
Manifest this update:     Sun 20 Sep 2026 11:00:08 +0000
Manifest next update:     Mon 21 Sep 2026 11:00:08 +0000
Files and hashes:         1: 2FyZFvB-FVapPyp8OxF8Buhh3yE.roa (hash: /qV6LbWkf2GFhmc8pLjxWR0FKBZh68Hu0SYXyVMMG5A=)
                          2: 5uFOCa8-r8p4u5DjbFcyMxWnxpk.roa (hash: six96PBP2FVtrDub0viM0uQeju8Q52lW6mmVN0at+D4=)
                          3: 66spJgWO4r5iJulLefAkdYTwISc.roa (hash: AyjLjLUdwhw2VQoEzrUJ+rotnQiPNzqjvEUgW3yJgvQ=)
                          4: AFebLvn6AH0mOGLAGY1K4fdA0ac.roa (hash: lc41gS5MnYI/Mo4Xzk3UtrseTVtRz4aEngOCwuhDcEI=)
                          5: CoLO71qrUv_4qMwwwRs5lDVCE9E.roa (hash: T4p9qnVSGm7AR+uo+khZZRMNDQd/GpzNGpYFRL2iEKU=)
                          6: G31aaGd5LlY50IGLO6eQwT_sz54.roa (hash: J+TTKw7LlUBt9s2Q/PONP/L4s5aJKpFWg7AH4f8ZIRU=)
                          7: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: cf2IcEyh+s/wlJCExdB03kn1JCpvX25xFOBktQduh9I=)
                          8: Jqd9n-XZPEdiLUATrAO0UNi7xjA.roa (hash: 9cuNi2UUB3uoW2G4GMhdugeWXWqlYW8/ZVXdji7vqm8=)
                          9: KO1c-cYNNAqMCPq-wcceOmqVK6w.roa (hash: hDkUSJOds1xJ/mF78m3f9ivjRM5rpSpBotw9vJgP2Oc=)
                          10: L2E8kLfTz8qUteKmwoh31dFHaxE.roa (hash: hKyjS+FUJ/jdytIrLwzkzpmkG4KKryD3XZ0g36E7hhU=)
                          11: M9KT4OPTqeZ3tbB5Yw_-6p5AP4M.roa (hash: 4TKndIvDB4Sw7bsQeB2cpG3ywgWnyRb3WdHUGpMtbw0=)
                          12: XJcb1-hBobILMv_Vof-Zxf0RkUg.roa (hash: VueF5+Q5F3brFftwGGvgxAFwrBBqXIBGanige3SzY7M=)
                          13: ZMFhHdct1ay2ckIDWW29DVIUO9Y.roa (hash: cULTButKO1Qr8LsfvEJV/B/XwfmJvmcWpfhHVwua4LI=)
                          14: _CTtp7ZPH0kOXThVR7wQj4XW06A.roa (hash: 6qdFfEyB76OZ8FZHFVIZ5XewiprUqvvRVqyD2drMzds=)
                          15: aApcJx1Vl6jx6w4yohNQaV1Io5Y.roa (hash: TnHtMgPhychs4GGqHiht/VWWogxSmwlOOeNfBvbp0w0=)
                          16: aVBsoh77D_iNTVE6G-pVs4IwFNU.roa (hash: SjFP3EKO9kRJAQSSiHp1MkjRkFkKiddJQ7bpylLAvy4=)
                          17: dqFe7wNfjR1Nsc6av71rr7iwjrY.roa (hash: 778fc5HBa0o5AC8IwBl5WFzGBmNT+U8lXN1dyf737Ao=)
                          18: mT-K5wz7DGgkYoPiR_2XSlQ0B6I.roa (hash: 73E2cGSZQ8+svLr+/xrcMfyFaxZmakWAGtNSf4DhDgw=)
                          19: nXcVZv-BU5nC4jNra5f09x54HeM.roa (hash: iqu36oMqP46CX2CYzFsUJwzZuRu/tE4uzTsQ189IQ3U=)
                          20: r3_mc9CdfqjKkPDbRieGRarY3J8.roa (hash: 1R/r8NdpsrVTyu0//wO87WSQNYrZaTMeX7aV4UcB6I8=)
                          21: uoQLE-swTh85hiFVPsKl5eVWOQ4.roa (hash: K1SsR7agoiH69i/sTMUIc8R2fXxdtnIpRcWvPv/Q/3M=)
                          22: yP0ogUTvEW_hziCgm9-4IHiaPi8.roa (hash: 7r/sWNzGuAucLe4oatUSqYsAP6wWeQ7BrAK3AM7I0vk=)
                          23: zzlejXCHpXgamH633G_B9GA9p_0.roa (hash: eE86eVMiNcHiwH9DJb7Ms+ClxkfBQ1nOerPmLa6il54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 11:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:79:32:21:14:ce:3b:4d:f3:2a:15:e8:ea:90:2f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
        Validity
            Not Before: Sep 20 11:00:08 2026 GMT
            Not After : Sep 21 11:00:08 2026 GMT
        Subject: CN=ebb0c84ef94702e801b9a604da6983d32d622afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3d:36:79:38:15:70:86:a5:b2:04:e6:64:af:
                    1a:81:c2:02:61:aa:59:11:57:b7:9e:43:d0:c8:c8:
                    ba:1d:8f:c0:15:df:0f:a9:ea:ea:ed:0e:4a:ee:b9:
                    85:1e:5a:7e:b8:da:6f:be:bd:0a:a4:df:7e:08:f3:
                    e7:4e:1c:c4:56:b8:4a:a9:d9:1c:dd:16:71:a1:77:
                    c6:39:33:8e:00:2d:bc:e8:a2:6b:aa:6a:71:3a:2e:
                    fc:37:1f:0f:2b:07:34:c6:9c:19:6e:7f:fa:8a:e3:
                    4d:9f:10:36:b0:56:56:31:0c:1a:20:cd:ad:68:e1:
                    b7:6e:4a:1e:8a:3d:6c:34:e1:d1:d3:3c:55:2d:71:
                    4e:ae:30:b2:d3:a8:8a:59:67:fb:80:01:0a:87:2c:
                    3c:a9:36:47:24:a9:74:d1:42:e1:df:08:d7:d1:e5:
                    1c:9f:8d:cb:c2:42:74:65:54:ff:cf:8a:f4:6d:c2:
                    04:e9:d9:97:72:4b:8a:30:95:14:98:0b:5b:2a:c6:
                    12:81:da:f9:38:46:3d:db:f5:f4:a4:ab:38:29:f7:
                    e6:75:9c:5b:66:d3:c4:4b:34:4e:3d:9d:dc:4f:d3:
                    08:90:ac:e9:f2:ab:bc:cf:75:3c:fa:93:6c:86:fe:
                    7d:51:ea:d1:08:e5:ae:65:29:f7:da:f4:75:a8:d4:
                    14:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B0:C8:4E:F9:47:02:E8:01:B9:A6:04:DA:69:83:D3:2D:62:2A:FA
            X509v3 Authority Key Identifier:
                keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:7a:45:75:98:23:ca:69:80:09:92:21:65:20:07:16:9e:40:
         99:ec:c5:0c:0c:a9:76:b4:f1:45:0d:5d:ca:ba:80:a6:94:af:
         a0:55:5f:61:67:53:b7:39:dc:9d:1f:56:7b:6e:ab:4d:62:71:
         dc:b4:3f:03:38:10:a3:29:b0:db:a8:bf:6d:35:2d:24:cc:db:
         e0:4f:32:bd:56:cd:6b:b3:14:a1:4d:35:27:05:c7:65:29:19:
         ae:d2:3b:21:58:94:76:d4:ef:ae:0a:9e:23:3d:71:3a:4c:8a:
         c6:54:17:12:c6:99:83:27:8c:6a:5a:cf:15:f0:39:1c:7d:30:
         5a:5d:e4:3d:b5:82:f3:82:09:da:33:d7:6c:d9:59:c8:f0:d2:
         4c:08:f5:03:0d:38:79:33:7c:90:3b:3f:2a:5f:90:72:07:06:
         66:b8:cc:58:9b:e5:8e:b8:ba:af:34:b6:18:aa:b0:61:24:00:
         93:78:1e:a1:71:9f:79:9b:15:78:84:1a:e2:67:79:4b:e5:74:
         18:47:6b:e5:f7:cf:81:eb:d2:13:0b:5e:f0:13:b4:d1:14:c6:
         c5:39:1e:38:2f:19:7e:d1:9a:b9:08:29:42:c3:74:92:ce:ab:
         e6:33:b8:e0:ad:7e:6a:ec:ec:45:ff:0f:e8:b4:53:9c:ac:64:
         32:60:81:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:22:47 2026 by rpki-client